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PATENT RECORD 

Address of Government ( Arlington Hall Station 
Station Where Inventors ( 4000 Lee Blvd. 
are Located ( Arlington, Virginia 

To The Chief Signal Officers 

I/fcs believe myself/ ^m =se3agg & to be sole i nventor o f an 

(sole or joint 

authenticating device 



and request that you investigate its military value, patentability, and 
inventorship. In support of this request the following information is 
submitted: 

At the time l/m conceived the invention, my/ascr employment was Direc tor 
of Com, Research- ssa , i/g* originally conceived the idea in Sept, 1 943 

and communicated it toj Ma.ior Leo Rosen 22 Ootober 194 




It was first actually trie d not tried with the result that 

(date ) 



for authenticating messages, particularly banking messages 

Its uses are ^ invo l v ing , : tr an sfer . of . mo n ey . — . — 

Others associated with me/xns in this development or having knowledge 

concerning it are: 

Major Leo Rosen, Sgt. Henry B. Stauffer 




Attached ar e 4 sheets, each initialed and dated by me/ax and 
disinterested witnesses, giving a detailed description of the invention, sa 

and a clear statement of what is believed 
to be new, , 

I/ilEH: agree to abide by the decision of the Patent Board or of the Chief 
Signal Officer and will promptly execute all papers required of me/«s: by 
these authorities includigg an assignment of the invention to the Government 
if it is decided by the Patent Board and confirmed by the Chief Signal 
Officer, that the application should be kept secret. 



Signature 

j ^q k, p c p ^ i tts /qr ^ 
LegaJ 

Pretent /home /P. O.y! 



secret, 

-MaIju 



ip 1 oyme n t 

szse / 



iddreJSs 



Date'of s 



Witnesses 



jf^natc 



V V 

- 



Si gnature 

■ ' jf Dir, of Com. 

Rank, position or employment Research , SSA, 
3932 Military Road, 

Legal residence Washington IS, D» C. 

Present home P, 0. address Same 



Date of sif 



Witnesses : 



Date / > 1 



1J£13^U2£1L : ^4-vy - A'4 , 

A.R, 850-50 outline the procedure to be followed in submitting 

inventions to the Chief Signal Officer, If the invention relates to Signal. 

Corps equipment this form together with a full description of the invention 
should be forwarded directly to the Chief Signal Officer, If the invention 
relates to equipment of another arm of service, the invention should be 
submitted directly to that arm or service. 

Most descriptions of inventions reoeived by the Signal Corps from 
inventions are too brief, vague and indefinite for the purpose of preparing 
patent applications. The Chief Signal Officer insists on very complete and 
clear descriptions. 

Declassified and approved for release by NSA on 07-29-2014 pursuant to E.O. 1352^ 
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Authenticating Device for Banks 

1. Reference is made to my previous invention 
of a "Message Authenticating System" covered by U. S. 

Patent No. 2,080,416, issued IS May 1937. Said patent 
was processed through the Signal Corps and the invention 
described therein may be manufactured and used by or for 
the ' Government for governmental purposes, without the 
payment to me of any royalty thereon. 

2. The present invention has a similar purpose 
but accomplishes it in a simpler way, which will be 
briefly described in the succeeding paragraphs, in. 
connection with Figure 1. 

3. A series of 10-point cipher rotors, 1, 

of the type commonly employed for cryptographic purposes, 
are assembled "in cascade” upon a shaft, 2, in some key 
order. The internal wirings or cross-connections within 
the rotors are all different and each rotor carries an 
identifying letter or number. A complete circuit through 
the set of rotors traverses a path which is determined 
by the specific order in which the rotors are arranged on 
the shaft, the specific rotatory positions in which the 
rotors --re placed, and the specific wiring of the rotors. 

The left-hand stator, 3, has ten input contacts, 4, six 
of which are connected by plugs and jacks to the six 
contacts arranged in an arc on insulator strip, 5. A contact 
lever arm, 6, pivoted at 7, serves to establish contact 
from battery, 8, to one of the six contacts, 9, on the strip, 
5, and thence into one of the input contacts, 4, of the 
stator, 3. The current thereupon traverses the rotors, 
emerges at one of the ten contaots, 10, of the right-hand 
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stator, 11, and thence returned to batter, 8, through 
one of the few indicating lamps, 12, to illuminate 
that lamp. The specifio lamp which will be illuminated 
will be determined by the rotor setting or key and the 
particular contact made at the contact strip 5. Thus, 
as lever 6 is moved to one of the contact positions, 
a certain lamp will illuminatedj another lamp will be 
illuminated as lever 6 is moved to another contact 
position, and so on. Thus, moving lever 6 through its 
three top positions suooessively will cause three lamps 
to be lighted successively. A removable cardboard strip, 

13, in the card-holder, 14, serves to identify the lamps 
and represents another variable element in the keying 
system. Thus, with a given key and a specific strip 13, 
moving the lever 6 through the three upper positions will 
cause three lamps to be lighted, fiving a number such 
as 759, for example. Moving the lever 6 through the 
three lower positions will yield a different 3-digit 
number, for example 63jZV 

4. The method of using the device as an 
authenticating means is as follows. It is usual current 
practice first to encode the telegram in the Bank’s private 
code or else in some suitable code. The test group is then 
composed, based upon certain test elements in the telegram, . 
as arranged by preagreement among the banks concerned. The 
test group is usually a numerical group of two or three 
digits, vfhich group is then looked up in the code and its 
letter group equivalent is set down as the final group 
of the message. All the foregoing procedure remains 
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unchanged in practicing my invention except that the 
composition of the numerical test group is accomplished 
by the machine discussed herein. This part of the 
operation will now be described. 

Having the machine at hand, the daily key is 
set up, consisting of the specific order in which the 
rotors are assembled on the shaft. The first two rotors 
are set to the serial number of the message; the next 
rotor is set to indicate what ourrenoy is involved 
(dollars, pounds, etc); the next six rotors are set 
to correspond with the amount of money to be checked or 
authenticated, six rotors providing for all amounts from 
1 to 999,999. Figure 1 shows the rotors set to message 
serial number 35, and to the quantity, U. S. 09,756,125. 
(Additional rotors may be provided to take care of 
other test elements, such as the initial letter or 
letters of the name of the beneficiary of the transfer) 

If the telegram transferring 09,756,125 is going from 
New York to London, for example, then the switch lever 
6 may be moved, by preagreement, through the upper three 
positions successively, yielding, for example, the 
authenticating group 759; if the telegram is going from 
London to New York, the switch lever 6 may be moved 
through the lower three positions yielding, for example, 
the group 63J2T. Thus the authenticating group is different, 
depending upon the message' serial number, the currency, 
the amount involved, and the direction of the transfer. 
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On each day, since a different permutation of rotors, 
a different plugging arrangement at the left-hand 
stator, and a different card can be employed, the test 
number would be different. The test number would then 
be encoded as usual, by reference to the codebook employed 
The number 759 might be represented by the code word 
ROXIP; 63jtf by PILYD. 

5. No means are shown in Figure 1 for 
automatically angularly displacing the rotors during 

a single test but the addition of such means is within 
the scope and forms a part of the invention. 

6. The bank receiving the telegram, after 
the usual decoding of the code message, notes the test 
data and the test group contained therein. It then 
sets up its plugs, enrd strip, and fotors according to 
the daily key and then aligns the rotors to c orrespond 

to the test data carried by the telegram. Upon_ operating 
the lever 6 it will obtain exactly the same test number 
which is conveyed by the telegram itself, thus attesting 
to the authenticity of the transfer as well as to the 
accuracy of the amount, insofar as the latter is possible 
considering that 10 x 9 x 8 to 720 different test groups 
is the maximum number obtainable from one key setting of 
the rotors and there are 10 million amounts which can be 
set up. This, however, is a feature which is unavoidable 
is common to all testing systems of this nature, and does 
not vitiate the systems to any serious degree. 
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Authenticating Device 



1. Reference is made *to my previous invention of a "Message 
' Authenticating System" covered by II. S. Patent No. 2,080,416, 
issued 18 May 1937* Said patent was processed through. the Signal 
Corps and the invention described therein may be manufactured and 
used by or for the Government for governmental purposes, without 
the payment to me of any royalty thereon. 



2. The present invention has a similar purpose but accomp- 
lishes it „in a simpler way, which will be briefly described in 
the succeeding paragraphs, in connection with Fig. 1. 



3. A series of 10 -point cipher rotors, 1, of the type 
commonly employed for cryptographic purposes, are assembled 
"in cascade" upon a shaft, 2, in some key order. The internal 
wirings of the rotors are all different and each rotor carries 
an identifying symbol. A complete circuit through the set of 
rotors traverses a path which is determined by the specific order 

in which the rotors are arranged on the shaft, the specific rotatory 
positions in which the rotors are ’placed, and the wiring of the 
rotors. The left-hand stator, 3* has ten input contacts, 4, six 
of which are connected by plugs and jacks to the six contacts 
arranged in an arc on insulator strip, 5* A contact lever arm, 6, 
pivoted at 7, serves to establish contact from battery, 8, to one 
of the six contacts, 9, on the strip, 5 > and thence into one of 
the input contacts, 4, of the stator, 3* The current thereupon 
traverses the rotors, emerges at one of the ten contacts, 10, of 
the right-hand stator, 11, and thence returns to battery, 8, 
through one of. ten indicating lamps, 12. The specific lamp which 
will be illuminated will be determined by the rotor setting and 
the particular contact made at the contact strip, 5. Thus, as 
lever 6 is moved to one of the contact positions, a certain lamp 
will be illuminated momentarily; another lamp will be illuminated 
as lever 6 is moved to another contact position, and so on. Thus, 
moving lever 6 through its three top positions successively will 
cause three lamps to be lighted successively. A removal cardboard 
strip, 13, in the card-holder, 14, serves to identify the lamps and 
represents another variable element in the keying system. Thus, 
with a given key and a specific strip lp, moving the lever 6 through 
the three upper’ positions will cause three lamps to be lighted, 
giving a number such as 759, for example. Moving the lever 6 
through the three lower positions will yield a different 3 -digit 
number, for example 630. A connection-changing plugboard may be 
inserted between the right-hand stator, 11, and the bank of indi- 
cating lamps, this serving to take the place of the variable 
cardboard strip 13, or as an additional variant in the system. 

4. The method of using the device as an authenticating 
means is as follows. It is the usual current practice first 
to encode the telegram in the Bank*s private code or else in 
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some other suitable code. The test group is then composed, 
based upon certain test elements in the telegram, as arranged 
by preagreement among the banks concerned. The test group is 
usually a numerical group of two or three digits, which group 
is then looked up in the code and its letter group equivalent 
is set down as the final group of the message. All the fore- 
going procedure remains unchanged in practicing my invention 
except that the composition of the numerical test group is 
accomplished by the machine discussed herein. This part of the 
operation will now be described. Having the machine at hand, 
the daily key is set up, consisting of the specific order in 
which the rotors are assembled on the shaft. The first two 
rotors are set to the serial number of. the message; the next 
rotor is set to indicate what currency is involved (dollars, 
pounds, etc.); the next six rotors are set to correspond with 
the amount of money to be checked or authenticated, six rotors 
providing for all amounts from 1 to 999*999* Pig. 1 shows the 
rotors set to message serial number 35* and to the quantity, 

U. S’. $ 9 * 756 , 123 . (Additional rotors may be provided to take 
care of other test elements, such as the initial letter or 
letters of the name of the beneficiary of the transfer.) If 
the telegram transferring $9*756,123 is going from New York to 
London, for example, then the switch lever 6 may be moved, by 
preagreement, through the upper three positions successively, 
yielding, for example, the authenticating group 759; if the 
telegram is going from London to New York, the switch lever 6 
may be moved through the lower three positions yielding, for 
example, the group 630. Thus the authenticating group is 
different, depending upon the message serial number, the 
currency, the amount involved, and the direction of the transfer. 
On each day, since a different permutation of rotors, a different 
plugging arrangement at the left-hand stator, and a different * 
card can be employed, the test number would be different. The 
test number would then be encoded as usual, by reference to the 
codebook employed. The number 759 might be represented by the 
code word ROXIP; 630 by FILYD. 

5 . No means are shown in Fig. 1 for automatically angularly 
displacing the rotors during a single test but the addition of 
such means is within the scope and forms a part of the invention. 

6. The bank receiving the telegram after the usual decoding 
of the code message, notes the test data and the test group 
contained therein. It then sets up its plugs, card strip,, and 
rotors according to the daily key and then aligns the rotors to 
correspond to. the test data carried by the telegram. Upon 
operating the lever 6 It will obtain exactly the same test number 
which is conveyed by the telegram Itself, thus attesting to the 
authenticity of the transfer as well. as to the accuracy of the 
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amount, insofar as the latter is possible, considering that 
10 x 9 x 8 or 720 different test groups is the maximum number 
obtainable from one key setting of the rotors and thei*e are 
10 million amounts which can be set up. This, however, is a 
feature which is unavoidable, is common to all testing systems 
of this nature, and does not vitiate the system to any serious 
degree. 

***** 

I believe that I am the inventor of the device disclosed 
in the foregoing sheets. 



8 June 1944. , * 

"William P. Friedman. / 
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***** 

I have read and understand the above disclosure. 



a (Date) 



/&. 

(Date) 
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